agent-skills-manager

SUSPICIOUS: The skill’s purpose and capabilities are broadly aligned, but it relies on a pipe-to-shell bootstrap and a downloaded external CLI binary without checksum verification, then uses that CLI to install additional skills into agent directories. Data flow appears same-org and not overtly exfiltrative, so this is not confirmed malware, but the supply-chain and transitive-install trust model make the overall risk high.